Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137392e3132342e3233342e302f32332d3233203d3e203238333630.roa
File:                     3137392e3132342e3233342e302f32332d3233203d3e203238333630.roa (raw, json)
Hash identifier:          OdimFeyWXGOvqKh/tl4yCxvJ1o11t+u2EUNxjDixP8U=
Subject key identifier:   26:13:5F:76:FC:30:D0:C3:14:19:D5:51:31:48:3A:9A:B8:63:7D:B1
Certificate issuer:       /CN=5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7
Certificate serial:       95938530404754E9F97BDA370280A66CEE206C
Authority key identifier: 5B:5B:C0:F1:8F:68:6D:74:91:0C:0C:BD:0D:D1:8A:C2:CE:82:CB:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137392e3132342e3233342e302f32332d3233203d3e203238333630.roa
Signing time:             Sat 06 Apr 2024 02:45:29 +0000
ROA not before:           Sat 06 Apr 2024 02:40:29 +0000
ROA not after:            Sat 05 Apr 2025 02:45:29 +0000
asID:                     28360
IP address blocks:        179.124.234.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            95:93:85:30:40:47:54:e9:f9:7b:da:37:02:80:a6:6c:ee:20:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7
        Validity
            Not Before: Apr  6 02:40:29 2024 GMT
            Not After : Apr  5 02:45:29 2025 GMT
        Subject: CN=26135F76FC30D0C31419D55131483A9AB8637DB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:2a:b2:93:8e:0e:3b:a3:f2:c4:4b:0b:8a:7a:
                    0b:47:fa:26:e6:f2:16:37:96:c5:06:d5:36:2c:ce:
                    11:e1:5e:a5:16:60:a6:cf:23:a2:92:92:d9:fa:a4:
                    ea:c3:02:9b:82:c6:b1:a7:01:5a:e1:36:b5:de:e6:
                    e9:d4:de:b8:9d:f8:5f:10:62:0a:1a:aa:73:a1:e5:
                    73:71:5b:85:42:21:ea:b2:81:9a:97:68:4e:75:d1:
                    50:20:8e:2e:88:63:06:f0:28:46:c7:4c:29:fb:d7:
                    9c:b9:ca:24:38:42:68:85:a2:6c:a9:4e:94:20:e2:
                    a4:93:9e:3d:fb:5a:6c:0d:a7:eb:3d:79:0d:df:3e:
                    13:95:84:48:52:4f:74:ba:32:05:3b:2a:e5:27:88:
                    4c:f5:a4:cf:6e:8f:ac:26:89:af:a3:86:24:f0:3f:
                    c0:36:32:c3:ea:bf:4e:82:3d:61:27:e3:1d:fb:6d:
                    e3:ba:89:a5:c9:ea:65:83:af:ea:1f:d3:ca:cd:f3:
                    19:a0:dd:d0:78:e6:22:35:25:f1:91:8a:6c:88:5d:
                    37:39:75:34:cd:21:b8:f0:54:6c:43:e1:55:7e:5a:
                    b8:b9:7a:6e:fd:0d:95:c8:ce:ab:04:49:ed:7b:75:
                    57:9c:5c:00:df:2d:8b:0a:5a:59:e6:dd:45:9a:1c:
                    33:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:13:5F:76:FC:30:D0:C3:14:19:D5:51:31:48:3A:9A:B8:63:7D:B1
            X509v3 Authority Key Identifier:
                keyid:5B:5B:C0:F1:8F:68:6D:74:91:0C:0C:BD:0D:D1:8A:C2:CE:82:CB:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137392e3132342e3233342e302f32332d3233203d3e203238333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.124.234.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3b:5e:65:9c:72:c7:3b:a9:52:99:e4:37:83:ff:1c:bc:33:57:
         4d:79:29:13:f8:fb:83:bc:78:b1:a7:5c:b7:f4:d1:02:ca:2d:
         5a:fb:c4:ab:4a:ac:7d:70:9c:63:3c:7f:f4:83:c4:7f:2f:ff:
         a6:9b:96:ca:99:64:60:a1:55:c3:b1:56:f7:d5:b7:8f:79:e8:
         50:92:9b:65:b1:8b:94:20:da:91:32:b2:17:73:97:98:17:48:
         f7:c1:26:d9:f2:ed:99:89:dc:ce:1b:96:4b:3c:c8:43:43:5d:
         d0:b7:74:b5:64:df:6d:29:37:e5:2e:e1:b7:27:85:52:46:30:
         14:4e:67:7a:39:c5:f0:68:8b:42:09:1f:aa:27:cd:1e:a1:cb:
         9c:34:8a:56:c4:52:28:ee:de:01:99:86:56:07:18:5a:2f:00:
         69:36:e1:98:2b:f4:68:cf:84:60:a6:78:67:74:93:95:36:94:
         ac:53:56:eb:db:d0:5c:25:1a:0b:e9:44:38:bc:53:85:d9:ba:
         54:a9:16:72:df:e8:b4:f7:1c:d6:c2:37:bc:82:12:6e:65:32:
         20:c6:88:6c:58:26:d8:d1:ac:e8:85:af:a7:97:ac:f2:1e:3e:
         9a:95:9b:7d:1c:11:07:a4:db:01:e9:cf:9c:b1:a8:37:4c:e9:
         54:b4:40:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:12:18 2025 by rpki-client